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We claim: 

^t^^^hV A validation protocol for determining whether an untrusted authentication chip is 
valid, or no\ including the steps of: 

, generating a random number in a trusted authentication chip; 

applying^ keyed one way function to the random number using a key to produce an 
outcome, in both th\ trusted authentication chip and an untrusted authentication chip; 

comparing theV)utcomes produced in both the tmsted and untrusted chips, and in the 
event of a match considering the untrusted chip to be vahd; 

otherwise considenng the untrusted chip to be invahd. 

2. A vaUdation protocol according to claim 1, where the key is kept secret. 

3. A validation protocol according to claim 1 , where the domain of the random 
numbers generated is non-deterministic; 

4. A validation protocol according to claim 1, where the keyed one-way fionction is 
a symmetric cryptograph, a random number sequence, or a message authentication code. 
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5. A validation protocol according to claim 1 , where the key has a minimum size of 
128 bits where the one-way function is a symmetric cryptographic function. 
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6. A validation system for performing the method according to claim 1 , where the 
system includes a trusted authentication chip and an untmsted authentication chip; the trusted 
authentication chip includes a random number generator a keyed one-way function and a key for 
the function; the untrusted authenitcation chip includes the keyed oneway function and the key; 
and a comparison means compares the outcomes produced in both the trusted and untrusted 
chips, and in the event of a match the untrusted chip is considered to be valid. 
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7. A validation system according to claim 6, where the key is kept secret. 



AUTH01 - 88189US 



-118- 



# 



A validation system according to claim 6, where the trusted authentication chip 
contains a \andom function to produce random numbers from a seed, and the function advances 
after every rahdom number is produced so that the next random number will be produced from a 
new seed. \ 

9. A valio&tion system according to claim 7, where each trusted authentication chip 
contains a random function to produce random numbers from a seed, and for a group of 
authentication chips, each chm has a different initial seed, so that the first call to each chip 
requesting a random number wilr^roduce different results for each chip in the group. 

10. A validation systelm according to claim 8, where the domain of the 
random numbers generated is non-determinis^c. 

11. A validation system according to clairk 6, where the keyed one-way functions is 
a symmetric cryptograph, a random number sequence, oK^ message authentication code. 

le key for the keyed one-way 
metric cryptographic function. 




1 2. A validation system according to claim 6, where^ 
function has at least 128 bits where the one-way function is a s> 
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